Strong Passwords are passwords that are not easily discovered by intelligent guessing. The Default Login Rules are options that can be configured to make sure that users create strong passwords in the Shireburn Payroll System.

These login rules can be either set to apply to a group of users (Admin-> Group Rights)


Or set to apply to an individual user (Admin-> User Accounts)


When the rules are set for a group, then all the users falling under that group can have these rules applied to their password by enabling the rules from the User Accounts screen. By default the group rules are loaded but they can be changed per user. (It is not mandatory that all users have login rules applied to their passwords.)


Default Login Rules





The Payroll administrator can opt to use the login rules or not by checking the “Enable Rules” checkbox marked in red in the image above. Not all rules have to be applied. It is up to the administrator to decide how strong and secure the passwords have to be.

Below is a description of each rule.

Min Length:	Defines the minimum number of characters that the password must have.
Requires Both Case Letters:	The password has to have at least one uppercase and one lower case letter.(a-z, A-Z)
Requires Digits:	The Password has to have at least one digit. (0-9) If the user tries to input a password without a digit the system will display the message below.
Requires Symbols:	The password has to have at least one symbol e.g. @,*,&,% etc
Password History:	The number of passwords that are remembered before they can be reused If the user tries to reuse a password within the password history then the system will display the message below.
Expire Every Days:	Defines the number of days that the password is valid for before it expires and needs to be changed. When the password expires the user is given a message as shown below.
Notify Before days:	The number of days the user is notified before a password expires. The message below is displayed. If the user chooses to change the password, the following screen is displayed. The new password entered has to satisfy the login rules defined for the user.